Why have some of my packets been sent to a MAC address that is not my Router?
My MAC address of my router is (be:69:31:35:30:43). I wanted to see how many packets I have that do not include the MAC address of my router in the source or in the destination of any of my packets. I put a filter and found out that 5 do not include the router MAC address.
I wanted to know the reason that each of these packets have been sent to a MAC address that is not the router. The MAC addresses are:
https://drive.google.com/file/d/1Mi9p...
1) Frame 55: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Source: QuantaCo_76:4d:83 (00:16:36:76:4d:83)
2) Frame 56: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Source: QuantaCo_76:4d:83 (00:16:36:76:4d:83)
3) Frame 57: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Destination: Broadcast (ff:ff:ff:ff:ff:ff) Source: QuantaCo_76:4d:83 (00:16:36:76:4d:83)
4) Frame 543: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Destination: IPv4mcast_01 (01:00:5e:00:00:01)
Source: Dell_ff:d8:c4 (84:2b:2b:ff:d8:c4)
5) Frame 544: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Destination: IPv6mcast_01 (33:33:00:00:00:01) Source: Dell_ff:d8:c4 (84:2b:2b:ff:d8:c4)
Was the capture done on the router or the outside interface?
If you apply a display filter of
!(ip.addr == 138.37.73.232)those packets are from the next upstream router?Is there a Dell machine in your systems that matches the 543/544 source MAC?
The capture was done on an outside interface and I have been sent this packet to analyse it. I wanted to know the reason that each of these packets have been sent to a MAC address that is not the router.